0.4.0

Mercury v0.4.0

2026 upgrade release: production-ready auth, configuration, and community standards.

Highlights

• pydantic-settings — typed Settings replaces manual env parsing
• Production hardening — env-gated Swagger/CORS, TrustedHost middleware, startup validation for weak secrets
• Auth — constant-time login, unified 401 errors, pwdlib Argon2 (legacy hash upgrade on login), active-user check on admin routes
• Architecture — FastAPI lifespan (Redis init), Flyway-only schema (no create_all), sync UserRepository
• DX — pre-commit (Ruff), README endpoint guide, Docker Hub docs (ayoub3bidi/mercury)
• Community — CODE_OF_CONDUCT, CONTRIBUTING, SECURITY, issue/PR templates
• CI — integration tests fixed for TrustedHostMiddleware (testserver host)

Upgrade notes

• Set ALLOWED_HOSTS for your domains in production (default includes localhost, testserver for tests).
• With APP_ENV=production, use strong JWT_SECRET_KEY (32+ chars) and non-default POSTGRES_PASSWORD or the API will refuse to start.
• Remove or disable the seeded admin (test@admin.com) in production.
• Existing sha256_crypt passwords are upgraded to Argon2 on next successful login.

Docker

docker pull ayoub3bidi/mercury:latest

Full stack: docker compose up --build (see README).

0.3.2

Full Changelog: v0.3.1...v0.3.2

0.3.1

Full Changelog: v0.3.0...v0.3.1

0.3.0

What's Changed

• Feat/add pipelines by @ayoub3bidi in #1
• Fix/fix docs by @ayoub3bidi in #2
• Feat/add linter workflow by @ayoub3bidi in #3
• Fix/upgrade workflows by @ayoub3bidi in #4
• feat: add new improvements by @ayoub3bidi in #5
• chore(deps): bump requests from 2.30.0 to 2.32.2 by @dependabot in #6
• chore(deps): bump python-multipart from 0.0.6 to 0.0.18 by @dependabot in #7
• chores(deps): add security fixes (done by dependabot) to main by @ayoub3bidi in #8

New Contributors

• @dependabot made their first contribution in #6

Full Changelog: v0.2.1...v0.3.0

0.2.4-beta

What's Changed

• Fix/fix docs by @ayoub3bidi in #2
• Feat/add linter workflow by @ayoub3bidi in #3

Full Changelog: v0.2.3-beta...v0.2.4-beta

0.2.3-beta

What's Changed

• Feat/add pipelines by @ayoub3bidi in #1

Full Changelog: v0.2.2-beta...v0.2.3-beta

v0.2.2-beta

This is the first official release 🥳

• Unit & Integration tests added 🧪
• Constant variables refactoring ♻️

Project Maturity: Admin focus

For this release we focused on the admin side, providing an auth_guard for the admin along with user CRUD.
The project is getting mature for future public release.

Project architecture: Refactoring

A lot of refactoring has been done for better dev experience.

Initial release

This will be the first version of Mercury template, which has the basics of any FastApi project from authentication and auth guards to Dockerization for faster deployment. Of course, there will be a lot of improvements coming in the subsequent releases.